User Jeff Ferland - Information Security Stack Exchange

Jeff Ferland

Moderator

Member for 12 years, 9 months
Last seen more than a week ago

Twitter
GitHub
storyinmemo.com
San Francisco, CA

422 Answers

Score Activity Newest

10 votes

Accepted

tripwire report - inode number

answered Mar 5, 2011 at 15:00

10 votes

Accepted

Smartphone / GSM Sniffer

answered Aug 8, 2011 at 14:17

10 votes

How is "something you have" typically defined for "two-factor" authentication?

answered Jun 8, 2011 at 19:06

10 votes

Security fields: AppSec vs. InfoSec vs. NetSec, etc

answered Sep 28, 2011 at 18:11

10 votes

Generate a PGP key with more than 4096 bits?

answered Oct 25, 2011 at 20:12

10 votes

Why does my bank use this card reader for 2FA?

answered May 30, 2012 at 13:08

10 votes

How to test for SQL injection query

answered Sep 30, 2012 at 22:48

10 votes

How does Tor protect against fake entry nodes / total redirection?

answered Dec 4, 2012 at 18:56

10 votes

A computing environment that saves no data

answered Dec 4, 2012 at 21:17

10 votes

Accepted

How effective is something like Deep Freeze against boot sector infections?

answered Nov 15, 2011 at 18:52

10 votes

Security implications of having files owned by the apache user?

answered Dec 14, 2011 at 16:32

10 votes

Accepted

Is enough to remove ".." from strings to avoid directory traversal attack?

answered Mar 6, 2015 at 1:45

10 votes

Accepted

Is GPG suitable as part of a password manager and generator?

answered Mar 5, 2013 at 15:16

9 votes

Accepted

How to track down a rogue laptop connected to an un protected ethernet socket in a big organization?

answered Mar 5, 2013 at 19:01

9 votes

Accepted

Why guest's connections can pass host's firewall?

answered Mar 23, 2013 at 0:33

9 votes

How do I know a piece of software only does what the author claims?

answered Feb 6, 2013 at 21:41

9 votes

Accepted

Combining SCRYPT + a short crc

answered Feb 2, 2015 at 21:19

9 votes

Accepted

Why is 8ms a goal for hashing?

answered Jun 5, 2013 at 20:07

9 votes

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

answered Jan 25, 2022 at 12:43

9 votes

Accepted

Policy requirements of Sarbanes-Oxley (SOX)

answered Dec 19, 2011 at 4:12

9 votes

Is it safe to store the password hash in a cookie and use it for "remember-me" login?

answered Dec 5, 2011 at 14:37

9 votes

GET request with different IPs

answered Feb 10, 2012 at 15:08

9 votes

Accepted

VPS security best practice

answered Jan 19, 2012 at 14:23

9 votes

Accepted

"Don't serve content over HTTP" - what does this mean, exactly?

answered Nov 8, 2012 at 2:34

9 votes

Using MD5 for malware ids: collision attack risks?

answered May 30, 2012 at 14:35

9 votes

Accepted

How to check if a website is sending out a virus?

answered May 1, 2012 at 14:05

9 votes

Accepted

Length of CSRF Token

answered Sep 8, 2011 at 20:14

9 votes

What are the likely threats to a public-facing DB instance?

answered Sep 9, 2011 at 3:01

9 votes

Would you go with SSD or Disk Hard Drive?

answered Sep 19, 2011 at 2:59

9 votes

SSD (Flash Memory) security when data is encrypted in place

answered Aug 16, 2011 at 18:22

4

5

…